A Windows Folder Encryption Tool.
How this project happened:
1. Me: "Hey DeepSeek, I have this wild idea..."→
2. DeepSeek: "Ooh, neat! Try using Dokany + DiscUtils?"→
3. Me: "...can you write the code?"→
4. *Copy. Paste. Tweak. Pray.*→
5. IT RUNS! 🎉 (kinda)
So yeah – this exists thanks to DeepSeek-R1. No AI, no OrangeCrypt. Simple as that.
This is NOT a serious, secure, or production-ready encryption tool. It's a proof-of-concept messing around with some cool ideas (maybe). Use at your own risk! Seriously, do NOT put important files in here. Things can and probably will go wrong eventually.
It's a C# program for Windows that tries to make a folder look like a single encrypted file (ending in .ofcrypt). When you "open" that file with the correct password, it attempts to magically mount the decrypted folder back in its original location (as a hidden folder).
- Setup: You run
OrangeCrypt.exe /installonce (needs Admin). This sets up file associations and some background stuff. - "Encrypting": You tell OrangeCrypt to lock a folder (e.g.,
C:\MySecretStuff). It:- Creates a big (up to 100GB!) encrypted container file next to it (
C:\MySecretStuff.ofcrypt). - Copies everything from
MySecretStuffinto this container. - Deletes the original
MySecretStufffolder. It doesn't securely delete the originals! (Big flaw #1).
- Creates a big (up to 100GB!) encrypted container file next to it (
- "Opening" (Mounting): Double-click the
.ofcryptfile. Enter password.- If correct, it uses Dokany (which you MUST install first!) to mount the container.
- It pretends the decrypted folder is back at
C:\MySecretStuff(but it's actually a mount point to the container).
- Working: Use the folder like normal (hopefully). Files read/written get encrypted/decrypted on the fly.
- "Closing" (Unmounting): Right-click the tray icon -> "Unmount All". Next time you double click the container, it'll ask you for password again.
Under the hood, it does this:
- The
.ofcryptfile is basically a wrapper around a sparse VHD file (handled by DiscUtils). - We need to trick DiscUtils into thinking it's reading/writing a normal, unencrypted VHD stream. But obviously, the whole file should be encrypted.
- So, we made (well, DeepSeek made) two special streams:
- Header Offset Stream: This lets us carve out a little space at the start of the
.ofcryptfile to store our own stuff (like the encrypted encryption key, some metadata). DiscUtils doesn't see this header. - Encryption Wrapper Stream: This sits on top of the main file data (after the header). Every time DiscUtils reads or writes to the "VHD", this stream automatically encrypts the data going down or decrypts it coming up. DiscUtils just sees plain VHD data.
- Header Offset Stream: This lets us carve out a little space at the start of the
- Dokany then takes this "fake plain VHD" provided by DiscUtils and mounts it as a custom file system, making the decrypted files appear.
- Windows 7+ (x64)
- Dokany Installed! (Just download
DokanSetup.exeand run it. Easy.)
This is purely a tech demo. It's full of holes and missing critical stuff:
- ☠️ NOT SECURE: Lacks proper security audits, secure deletion, key management best practices, etc.
- 💥 Fragile: No backups of critical container headers (lose this, lose everything inside). Crashes, power loss? Bad news.
- 🗑️ Space Hog: The container file (.ofcrypt) only grows bigger (up to 100GB), never shrinks automatically. There's a janky "Optimize" right-click menu to try shrinking it manually. Good luck.
⚠️ Stability? Meh. It might work sometimes. Maybe.- 🔒 Limited Size: Max 100GB per container.
- 👨💻 My Skills: Let's be real, I mostly cobbled this together by asking DeepSeek-R1 for code snippets and hoping it runs. It's held together with digital duct tape.
- Install Dokany: Get it here. Run
DokanSetup.exe. - "Install" OrangeCrypt: Open a Command Prompt as Administrator. Navigate to where
OrangeCrypt.exeis. Run:OrangeCrypt.exe /install - Lock a Folder: Right-click on a test folder (use junk data!). Choose "Encrypt(ofc)". Follow prompts (set password, wait for copy).
- Open: Double-click the new
.ofcryptfile. Enter password. Hopefully, the folder jumps out. Use it (lightly!). - Close: Right-click the tray icon -> "Unmount All". If you shut down your system without done this, the daemon is likely to do it for you, hopefully.
THIS IS A DEMO. IT'S LIKELY BUGGY AND INSECURE. TREAT IT AS SUCH. DO NOT RELY ON IT FOR ANYTHING REMOTELY IMPORTANT. YOU HAVE BEEN WARNED!
Built with: C#, Dokan.Net, DiscUtils (LTRData fork), and a lot of wishful thinking. 🚧🧪